CVE-2025-11419 - Keycloak: keycloak tls client-initiated renegotiation denial of service

CVE ID : CVE-2025-11419 Published : Dec. 23, 2025, 8:42 p.m. | 5 minutes ago Description : A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor